CVE-2026-5712
IdentityIQ Role Editor Incorrect Authorization Vulnerability
CVSS Score
8.0
EPSS Score
0.0%
EPSS Percentile
0th
This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.
| CWE | CWE-863 |
| Vendor | sailpoint technologies |
| Product | identityiq |
| Published | Apr 29, 2026 |
| Last Updated | Apr 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for sailpoint technologies identityiq
Be the first to know when new high vulnerabilities affecting sailpoint technologies identityiq are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
SailPoint Technologies / IdentityIQ
8.5 < 8.5p2 8.4 < 8.4p4 8.3 < 8.3p5
References
Credits
🔍 wildwildwes